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b7D 


PROGRAMS IN CERN CompuTERS. [__ 


——— - [torn oar rin procral LISTS ABOVE AS. re 


r 


ig FC a 
“NETDCL.CON APPEARED IN-A REPORT UF COMPUTER INTRUSIONS AT THE - BID 


__LAWRENCE BERKELEY LABORATORY (LBL). THIS REPORT WAS COMPILED BY _ 


OF LpL AND FURNISHED. TG LEGAT ROK INVESTIGATIVE ~~ re ge 


PUKBOSES IN THE CASE CAPTIONED “UNSUSL; UAAUTHORIZED USe OF 
GOVERNMENT CURPUTER SYSTdic In LAWRENCE BERKELEY LABORATORY, 


_SHaKELEY, CALIFORNIA;s{[ 5 00: ALEXANDRIA", (BOKFILE 196A-221)-_ 


REPORT UNDER THE SUBHEADING —..] 


ABOUT THE POSSIBILITY OF GCC HACKERS ALSO HAVING INTRUDED IN LBL 
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COuPLTERS AND AS TO THE EXACT NATURE OF THE NETDCL.COM PROGRAN. 


Thi IDENTITIES OF TEE ACTUAL INTRULERS WITHIY THER ccc 
IS AS YET UNKNOWN, THOUGH THERE ARE SEVERAL SUSPECTS. IT WILL 
LIKELY 82 DIFFICULT TO ESTAZLISH THE INTRUDERS' IDENTITIES CINCE 


THE TERGINAL, FROM WHERE THE INTRUSIONS WERE CONDUCTED, IS 


_LOCATLY IN The CCC ubeTING RUG wREAE ALL LEa 


HAGE ACCES Sioa tga ces 


WITH THAT CASE. 


If IS AT Tals POINT uNKNoW ToL 


| PAGE FOUR DE BON 0314 UNCLAS £ F T O 
IN CONTACT WITH THE suspEcT[_SCSCSC™C~CSC‘dY; GK: TCC’ 


REQUEST. oR ‘THE BUREAU ee eee ee 


oo ~~" “pareg Is. REQUESTED TO CONTACT NASA HQ PURSUANT 16 [] i{ | bD , 


Po an mvs 2ouw oF xesunts. 


LEADS - PHILADELPHIA AT PHILADELPHIA, PENNSYLVANIA: 
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WILL ADVISE OF RESULTS OF INVESTIGATION REQUESTED IN 
REFERENCED TELETYPE. 


ALEXANDRIA AT ALEXANDRIA, VIRGINIA: 


WILL REVIEW ALOVE INFORMATIOiU TO DETEXuINE IF ccc HAY 


HAVE BEEW INVOLVED IN INTRUSIONS PREVIOUSLY ATTRIBUTED TO[ | b6 
b7¢ 
| = [_] 18 ALEXANDRIA FILE 1964-999 AND ADVISE AS TO THE WEANING OF b7D 


Tht PRrOGRAU [| ANE ITS POSSIELE SIGNIFICANCE IN THIS 


MATTER. 7 


BT 


e ve - - . JecN ast nnd am = S ans Reed 


ZC1uG0035 


RR ASO 


FORMS.TEXT HAS 1 DOCUMENT 

OUTBOX.1 ([583) 

TEXT: 

VZCZCBS0003 

RR HQ_ 

DE BS |0003 2372026 ; ; . 
ZNR UUUUU 

R 2515022 AUG 87 

FM = BOSTON (264A-1) (B) (C-5) 

TO ACTING DIRECTOR (ROUTINE) 


BT 


UNCLAS 


"ATTENTION: CID, WHITE COLLAR CRIMES SECTION °°} 


“UNSUBS, AKA GOMPUTER CHAOS CLUB, HAMBURG; FEDERAL REPUBLIC OF 


SS CRRMANYS(ERG)G(" 2 Ae Boge ue ee oEe aes 2. eee Pe 
RE LEGAT, BONN TELETYPE TO THE BUREAU, 8/19/87, AND BOSTON 
TELEPHONE CALL TO SUPERVISOR[ sd FBIHQ, 8/20/87. Be 


on e/20/87, [ - 
[ TELEPHONE| ————_—si| ADVISED THAT HE. Is 


FAMILIAR WITH THE COMPUTER CHAOS CLUB OF HAMBURG, WEST GERMANY. 


[Ld satp THAT[__]HAS HAD A CONTINUING PROBLEM WITH THE 


ACTLVITIES OF THIS ORGANIZATION. ACCORDING To[_| THE y, | nt) gS 
GERMAN, SWISS AND FRENCH POLICE ARE ALL CURRENTLY INVESTIGATING A 


SEARCHED 
SERIALIZED CoAT 
: NDEYED 


(Altre 


o0.0Uw!~;~CSOOZ’ 


RAGE TWO DE BS 0003 UNCLAS 
THE COMPUTER CHAOS CLUB. 


[i europzan MOLECULAR BIOLOGY LAB, MEYERHOFSTRASSE 1, 

6900 HEIDLEBERG, WEST GERMANY, TELEPHONE[_——————sidSSCHASS A 
, GREAT DEAL OF KNOWLEDGE RELATING TO THE COMPUTER CHAOS CLUB AND 
ITS ACTIVITIES. [| HAS ALLEGEDLY IDENTIFIED TWO OF THE 
MEMBERS OF THE CLUB. ON 8/4/87,[ __]-REPORTED ro[ | quar 
COMPUTER HACKERS HAD PENETRATED tue| | vas OPERATING SYSTEM. 


+. THIS PENETRATION OCCURRED AFTER HAD CORRECTED AN ERROR IN THE 


| SYSTEM THAT HAD ALLOWED COMPUTER HACKERS ‘TO-PENETRATE THE SYSTEM _ 


{ mate ke SS ; 
~ INTHE PAST. THE ERROR IN-THE“OPERATING..SYSTEM HAD BEEN 


CORRECTED AS OF 7/31/87. [___——sdisucGESTED THAT[_]WOULD BE 


| VERY HELPFUL To AUTHORITIES..IN THEIR INVESTIGATION OF THE 


¢ COMPUTER CHAOS CLUB: ~ = Ge ee 
[sd apvisep THAT ANOTHER INDIVIDUAL WHO MAY BE HELPFUL 

IN. THE INVESTIGATION rs[_ 
| ji] _ | 


[_| vevepnone numper s[_ dss ES BN 


[_|was inrorMep THAT THE FBI MAY BE RECEIVING SOME 


SPECIFIC TECHNICAL INFORMATION DESCRIBING HOW THE COMPUTER 
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b7Cc 
THAT IF THIS INFORMATION WERE PROVIDED TO HIM, HE WOULD INSURE . b7D 


‘THAT IT WAS IMMEDIATELY FORWARDED TO APPROPRIATE [__]empLoygzs so 
THAT THE ERROR COULD BE CORRECTED. 

| THE BUREAU IS REQUESTED TO FORWARD TO BOSTON DIVISION THE 
ELEVEN PAGES OF INFORMATION THAT ARE BEING DELIVERED FROM LEGAT, 


BONN. BOSTON DIVISION, IN TURN, WILL PROVIDE THIS INFORMATION TO 


= 


a ~ THE-BUREAU_IS REQUESTED ‘TO FORWARD THE ABOVE INFORMATION TO. 
“LEGAL, BONN ._ eS ae ets 

spp ae i ee a, 

... , ]0003 7 : ace Tete 
NNN? OS ed oe, ao ; 


om * : ae Bie ud ae Ee we te 
ae a —— peat: pliie 


0 


FORMS .TEXT HAS 1 DOCUMENT 
OUTBOX.1 (|746) 

TEXT: 

VZCZCBS0002 

00 HQ 

DE BS [0002 2401837 

ZNR UUUUU 

0 281523Z AUG 87 


FM BOSTON (264A-1) (PB) (C-5) 


TO 


ACTING- DIRECTOR (IMMEDIATE) 


_ CID - WHITE COLLAR CRIMES SECTION 


Bg, AKA COMPUTER CHAOS CLUB, HAMBURG, FEDERAL REPUBLIC-OF-—— ~ 
crs); [1] __ 
LEGAT, BONN TELETYPE -TO THE BUREAU, 8/27/87, AND BOSTON 
TO supv.[ ss FBIHQ, 8/28/87. 

8/28/87, BOSTON DIVISION NOTIFIED [ 
A THEY WOULD BE RECEIVING 


GERMANY 


RE 


TELCALL 


ON 


A PACKAGE FROM FBIHQ VIA DHL EXPRESS=| | wAS-ADVZSED-THAT THE - -__ 


PACKAGE, WHICH WOULD PROBABLY ARRIVE ON 8/31/87, WOULD CONTAIN 


INFORMATION RELATING TO INTRUSIONS BY THE COMPUTER CHAOS CLUB 


INTO melas WAS MENTIONED IN PRIOR 


COMMUNICATIONS, DIRECTOR OF sEcuRITY[ ———s————SS—=«d'ASS 


264 l, 3 


SEARCHED 
SERIALIZED 
m4 | INDEXED 
FILED 


> O © 
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a 


PROMISED TO PROVIDE THIS INFORMATION TO approrriate[ | 
EMPLOYEES. 


[ _}was FURTHER ADVISED THAT IF THE INFORMATION BEING SENT 


FROM EBLHQ IS NOT SUFFICIENT TO VERIFY THE FLAW'IN TH | 


| rue: sour CONSIDER SENDING A REPRESENTATIVE 


TO THE PROPOSED MEETING WITH THE INTRUDERS DESCRIBED IN 


REFERENCED TELETYPE. 


LEGAT, BONN IS REQUESTED TO PROVIDE BOSTON DIVISION WITH A 


TENTATIVE DATE AND LOCATION FOR THE PROPOSED MEETING WITH THE 
_ __ INTRUDERS. 


= 


THE BUREAU IS. REQUESTED TO PROVIDE. THE ABOVE INFORMATION T 


LEcaT, BONN? -—~—~-—— 


BI _ . . an 


“| 0002" 


, NNNN ke ene Fee ee 


ij 


— 


DeCLAsSivicar CN AUTBURITY DERIVED 2eU. 
Pel AUTOMATIC CE Lass CATION GULUE 


CATE GB-02-2021 ay:-C 
ro” ~2 


‘er 


FORMS.TEXT HAS 1 DOCUMENT : 
INBOX 1 (]696) 


TEXT: 


VZCZCHQOO75. - _ <e 
00 HQ AX BS 

DE BON |0121 2390957 - 

ZNY CGCAe™. 11) 

0 270948z AUG 87 


FM LEGA BOUN Cienr ea) (P) 


TO ACTING DIRECTOR IMNMEDIATE 7 > oe ae 


ALEXANDRIA TMMEDEATE 0 nn 


BOSTON (INFO) ROUTINE _ ae ee Ae --- 0 = 


ATTENTIOW CLD, WHITE COLLAR CRIM™ SECTION 
UNSUB . AKA COMPUTER CHAOS CLUB, HAMBURG, FEDERAL REPUBLIC OF 


"GERMANY “(FRG)}; [__} “7 $4 Se ee te Lee 
THIS TELETYPE IS CLASSIFIED CONFEDENTIAL IN ITS ENTIRETY~ 


REBONTEL DATED AUGUST 19, 1987, AND BONN DHL SHIPMENT TO 


[| sFBrng, on AuGusT 21, 1987. b6 
: b7c 


IN FURTHER DISCUSSION OF THIS MATTER WITH THE, b7D 


Peoria 
SERALROSSELF iLED 


[A FOIMS ( eee 
fj uecativs [] NEGATIVE 
[] SA [] sa 


of ARUTIALs: INITIALS: 


¥ ~ oO 
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IT LS NOTED THAT TO DATE NO RESPONSE TO LEAD OR REQUEST OF 
THE BUREAU IN REFERENCED TELETYPE NOR ANY ACKNOWLEDGEMENT OF 


RECEIPT OF REFERENCED DHL SHIPMENT HAS BEEN RECEIVED AT BONN. 


[| pec orrtctans THERE Apvis™D[ sd THAT. CHE 


WOULD BE RECONTACTED BY DEC OFFICIAL| _—_—_—=i| (PHONETIC) BUT 


THIS RECONTACT NEVER MATERIALIZED. [ss—s—sSCSCiSd 


~ “AS MENTIONED IN--REFERENGED-TELETYPE-AND REITERATED BY[ —_|IN 


b6 
b7Cc 
b7D 


wie 


b7D 


———asovecnentiowenpiscussroy, [| 


ALONG peas A SEBCIAEIOE RNOULEDGEAEEE 


SPECIALIST, 


IN ORDER TO DISCUSS THEIR SUCCESSFUL INTRUSIONS INTO, 


[ _|coururers AND EXPLAIN THE FLAW. SUCH A DISCUSSION WOULD BE 


b7D 


G 


oo , O 
4 ’ , 
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CONDUCTED ON THE. BASIS THAT THE INTRUDERS' NAMES ARE NOT 


Po tts case 


DID MAKE THE PRESS AND THE INTRUDERS WERE NOT INTERESTED IN 
KEEPING THE MONEY BUT STATED TO BANK OFFICIALS AND AUTHORITIES 


THAT THEIR AIM WAS TO POINT OUT THAT THE BANK'S ACCOUNTS WERE NOT 


fees 


ADEQUATELY PROTECTED. AND THAT STEPS TO CORRECT SUCH FLAWS SHOULD 


—SBE-TAKEN. | PER Nae Sie hoe 


= D . ar = SST - 


THEIR INTENTIONS ARE DEMONSTRATED Bi THEIR WILLINGNESS TO MEET ed: : 


WITH AUTHORITIES AND A DEC SPECIALIST IF THIS IS DESIRABLE. 
b7D 


8 Sen st! 
3 
% 
. d 


IT IS SUGGESTED THAT IF DEC CANNOT VERIFY THE FLAW BASED ON 


THE INFORMATION PROVIDED IN THE DHL SHIPMENT, THAT THEY SEND A 


ee < © O 
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SPECIALIST WHO COULD TALK TO THE INTRUDERS ALONG with[ | ae 
[| ARRANGEMENTS FOR THIS MEETING SHOULD BE MADE b7D 
THROUGH LEGAT, BONN, ASSISTANT LEGAT[T CON AN 
EXPEDITIOUS BASIS. : 
FBIHQ AND BOSTON ARE REQUESTED TO ADVISE BONN OF : 
DEVELOPMENTS. 
. . “CEASSEFEED- BY 8049; DECLASSIFY ON OADR. | 
BT 
-—foozs. Ae Nae io 
0 PETE TO SEEN BA ea al 
a 
ie ; rr ess 
| NNNN “3 eae 2 pe BOT a oe a 


-~ 0:9 (Riv. 8-16-79) C : CD 


Airtel 


TRANSMIT VIA: —_—_ ae 
CLASSIFICATION: ss DATE: 


FROM: Acting er ee FBI 
TO: SAC, Boson (264A-1) (C-5) 


UNSUBS 
AKA: GOMPUTER CHAOS CLUB, 
HAMBURG, FEDERAL REPUBLIC OF 


GE ? 
Res Boston teletype to the Acting Director, 8/25/87, 
and Bonn teletype to the Acting Director, 8/19/87. 


Enclosed for Boston are two (2) c 
printout allegedly representing- 


1s material was received at _FBIHQ via- 
-express—mail-—on -8/24/87, ou couaesd to the Technical Services 
Division, the N. 1d sent 


directly to th 


Boston is requested 4 to recontact] _|aetermine the 


meaning; method, and éxtent of the intrusi advise FBIHQ and 
Legat Bonn. a 


Enclosures 


SEARCHED, INDEXES 


ma 
AMR 3 1 1837 


b7Cc 


FD-36 (Rev, 8-29-85) 


ag So SMIT. VIA: PRE : aa 
Teletype immediate 


Cc 
O TOP SECRET 


= Facsimile O Priority O SECRET 
ee ee () Routine O CONEJDENTIAL 
O UNCLASEFTO 
oc pee | 
ys Date AWs 


FM BOSTON (264A-1) (P) (C-5) 


2 
5 TO ACTING DIRECTOR (IMMEDIATE) 
fe ol BP 
5, | UNctas 
3 | ATTENTION: aie COLLAR CRIMES SECTION 

UNSUBS, AKA COMPUTER CHAOS CLUB, HAMBURG, FEDERAL REPUBLIC OF 

"| cera (FRG); [_| mn 
RE BOSTON TELETYPE TO THE BUREAU, 8/28/87, AND LEGAT, BONN 

Buh Ben. 

oo Ne 
1 
12 
13 — 
14 | THIS INFORMATION IS NOW IN THE HANDS OF TECHNICAL PEOPLE AT [| 
15 | WHO ARE EXAMINING THE MATERIAL. [ _JADVISED HE WILL CONTACT 
16 | FBI, BOSTON WITH THE RESULTS OF THE EXAMINATION OF THE COMPUTER 
Nagin 8 tot ee ae DOA an 2, Bey . 

18 
19 
20 


Approved: _ tele Transmitted Gals EXO Per KAN 


(Number) (Time) 26Y a a G 
SEARCHED 
SERIALIZED CA 


Per INDEXED 
FLED «= CAF 


PRINT OUT. 


ON 8/28/87,[_ sd) DEC, LONDON, ENGLAND, TELEPHONE 
[____—_=sC| SFT A MESSAGE FOR BOSTON CASE AGENT: - IN-HIS. 
MESSAGE,[ _——__—=| INDICATED THAT HE WOULD CALL LEGAT, BONN ON 
8/31/87, TO SEE IF HE COULD MEET WITH THEM ON TUESDAY, 9/1/87, TO 


DISCUSS CAPTIONED MATTER.[ _—s|starep tHat[S—S~S~—=s@d 
[FoR DEC IN LONDON, ENGLAND. 

THE BUREAU IS REQUESTED TO PROVIDE THE ABOVE INFORMATION To 
LEGAT, BONN. 


b6 
b7c 


oe a fiber aar = — 2 


DECLASSTVICATION AUTHORT 
HI AUTOMATIC DECLASS 
DATE 08-02-2021 


2 
FORMS.TEXT HAS 1 DOCUMENT 


INBOX.1 (]|265) 


TEXT: 
VZCZCHQ00085 oe, 


P 081100Z SEP 87 

FM LEGAT BONN (196A-229) (P) 

TO ACTING DIRECTOR PRIORITY 

ALEXANDRIA PRIORITY 

BOSTON (264A-1) PRIORITY 

Cc 0 A L 

BT 

ATTENTION CID, WHITE COLLAR CRIME SECTION 


ENSUES AKA MPUTER CHAOS CLUB, HAMBURG, FEDERAL REPUBLIC OF 


GERMANY (FRG) ; cer : b7D 


-REBSTELS AUGUST 28, 1987 AND SEPTEMBER 2, 1987. 


~ -.t > ON SEPTEMBER 1, 19°87, LEGAT-ATTENDED A-egTine at] | oo 


feo PRESENT AT THE MEETING WERE THE 
_ Fonbowine: (1)L FOR Be 
See ; b7C 


EUROPE AND THE MIDDLE EAST (OFFICE: ®. 0. BOX 115, READING, : b7D 


Pe 7 i 
eZ 


SEP 09 187 


THIS” TELETYPE Is” CLASSIFIED ‘CONFEDENTIAL WHERE™ MARKED « rae ace Sa gee 


= “BERKSHIRE-RG20TL ,~ENGLAND , -TE fepoone{ ie C2) [LD sid 2. 


4 


li 
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SS 2 2 | 
FREISCHUETZSTRASSE 91, 8000 MUNICH 81, TELEPHONE[ ss : 
9 orc 

MUNICH, TELEPHONE[ si CAND, ee] 


a MUNICH, TELEPHONE NUMBER (089) 


b7C 
(RROTECT)[S™~*~“*‘S™C#C#CYSOCWMSYEGAT:«WAS ALSO PRESENT AFTER BEING b7D 
CALLED AND REQUESTED TO ATTEND ByL AF. 
THE MEETING BEGAN WITH A BRIEF OUTLINE BY | | oF THE ; b6 
b7c 
RESULTS OF RECENT INVESTIGATIONS CONDUCTED BY HIS OFFICE. " bID 


| [____]sratep ruat| —|WAS AWARE OF INVESTIGATIONS BEING 
——eoxwverse-ee {i 
” qHEY HAVE ALSO es eet bas oye -- = 
sof ReaD ING THE COMPUTER CHAOS CLUB 


(cCC). [__pecentiy HAD: PROBLEMS IN TOKYO WHEREIN A CUSTOMER 


| 


INCURRED INTRUSIONS INTO THEIR COMPUTER system. [ EXPERTS WERE 
ABLE TO TRACE THE INTRUSIONS BACK TO MAX PLANCK INSTITUTE IN 


==>=HETD DELBERGS<.WEST= “GERMANY ;_. BUT= NO -FURTHER.. - eos 


THE[__———~—~—~—~— ADVISED THAT HE HAS A SOURCE b7D 


| 
Ee eke ees te 


—————yy—————_—_—_—_—_ $F © RAST Tn 
= oa De et ae oe = . - 
| ry av Wh ty 
: O O 
‘ 


« 
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SYSTEMS WITH INFORMATION THAT THEY FEARED MIGHT BE 


CLASSIFIED. DRY. +/17) 


[______sJREPRESENTATIVES OF CCC, WHO ADVISED AS b7D 


FOLLOWS: (1) THE HACKERS HAD STOPPED THEIR ACTIVITIES; (2) THE 


HACKERS WERE WILLING T0 COOPERATE WITH AUTHORITIES; AND, (3) THE 
HACKERS SAID THAT THE “HOLE” IN THE SYSTEM WAS NOT FIXED--THE 


COMPUTERS CAN STILL BE ACCESSED. C8Q. (1) 


-____-____ AS. NOPED--EN:-EARLIER—-GONMUNICATIONS, -THE--REPRESENTATIVES.— ote 


_ADVISED THAT IF. -_THE "HOLE" | IS NOT CL CLOSED, _ THEY WILL GO TO THE 


PRESS WITH ALL THE FACTS. EVIDENTLY, THE PUBLICATION Be, i ee ee 


el 


“HANDELS BLATT" wih PUBLISH A SMALL ARTICLE THIS ‘WEEK ABOUT THE 
~ CASE AND ON “SEPTEMBER ‘15, A FOUR- -PAGE ARTICLE WiLL” APPEAR IN THE 
MAGAZINE “DATENSCHUTZBERATER.” BOTH OF THESE ARE SPECIALIZED 
PUBLICATIONS WITH A VERY LIMITED CIRCULATION. THE "DEUTSCHE 


_ PRESSE AGENTAR" AE): SSTUSEAR TO REUTERS ETC. a SUPPOSEDLY» KNOWS © 


SOMETHING OF THIS CASE BUT NOT ‘YET ENOUGH. ‘To PUBLISH AD 


aa a a eee a a pe een ie erate 
ry : paar eo See Bes ase * ws + te 8 By a Bar * ae 
a nit i 
“ 
ie) 
a 
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STORY. BG; 


FROM THESE DISCUSSIONS, IT APPEARS THAT ONE OF THE MOTIVES 
OF THE HACKERS IN OFFERING TO TALK TO DEC IS SO THEY CAN LATER 
PUBLICLY PROCLAIM THaT[ | HAD ‘To TALK TO THEM (CCC) IN ORDER TO b7D 
SOLVE A PROBLEM WITH THELR COMPUTER SYSTEM. UNDERSTANDABLY] | 
OFFICIALS ARE NOT LNTERESTED IN TAKING ANY ACTION WHICH WOULD 
TEND TO LEND CREDIBILITY TO THE CCC. Y@Y. 7 

AFTER STUDYING THE PRINTOUTS MADE AVALLABLE BY THE HACKERS 
AND CONFERRING WITH OTHER ENGINEERS IN MUNICH AND THE UNITED 


STATES,[ _______——=«( STATED THAT HE IS OF THE FIRM OPINION THAT bé 
3 b7Cc 


SUFFICIENT "PATCHES" HAVE BEEN MADE SO THAT THE SO-CALLED "HOLE™  ~ b7D 


— IS8.NO LONGER -EXISTENT..- HE-ADMITTED- THAT PREVIOUSLY THERE HAD —- |. J. = 


BEEN. Wunnppapriznzeszn[ __[Systan, WHICH HAD BEEN 


: INSUFFICIENTLY “PATCHED,” -BUT THIS HAD BEEN -CORRECTED. [hs aim te ate Oe 


ALSO CONCERNED REGARDING THE ALLEGATION THAT THE SYSTEM WAS. 


i - —.-—___+] THEY WILL CHECK INTO THIS ALLEGATION BUT DOUBT THAT 


THIS IS, IN FACT, THE CASE. 


wt 


" SYSTEMS LISTED AS INCURRING INTRUSIONS (THREE- -PAGE “LIST WITH 


. : ia . * 2 > 
rer “ 
- aa. 
| : O 
< ( ) 
ra 
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DIFFERENT FACILITIES PROVIDED TO BOSTON BY DHL courier),| __—i| 
PT 
THEREFORE, HE IS CONFIDENT THAT ACTUAL (AS OPPOSED TO ATTEMPTED) 
INTRUSIONS OCCURRED INTO THE SYSTEMS OF UNIVERSITY OF CALIFORNIA, 
CALIFORNIA TECH, NASA-GODDARD SPACE FLIGHT CENTER (GSFC), NASA- 
HEADQUARTERS., WASHINGTON, D. C..AND THE NASA-MARSHALL SPACE - 


FLIGHT CENTER (MSFC). [ _‘ STATED THAT CLASSIFIED 


INFORMATION ts wormatny[ 
ae ee 


COULD PENETRATE. |. 


——. 


Coa 2 eee ae | HIS OPINION REGARDING | REPORTING 
EVERYTHING a 


a DS 8 ES 


INVESTIGATION SO FAR HAD PROCEEDED TO THE POINT THAT THEY HAVE 
IDENTIFIED TWO. PERSONS WHOM THEY THINK TO BE TWO OF THE HACKERS 


INVOLVED IN THESE INTRUSIONS -¥@{ jpj- = hatte Ate at wane 


A 


LEGAT EXPLAINED FBI'S INTEREST IN THIS MATTER AS FOLLOWS: 


Pop eyor crraerans 
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: ON SEPTEMBER 2, 1987,| === TELEPHONICALLY 


CONTACTED LEGAT AND ADVISED THAT HE WOULD BE IN ITALY BUT WAS 


GOING TO BE BACK IN ABOUT A WEEK. [ | OFFICIALS WERE VERY 
COOPERATIVE AND ARE VERY HAPPY THAT THE FBI IS INVOLVED IN THIS 
CASE. 

AT THE PRESENT TIME,| — |xs CONTINUING THEIR OWN 


—_- INVESTIGATION. BUT_IS HOLDING_OFF AT THE PRESENT TIME FROM ee ; 


REPORTING THE RESULTS OF THEIR investication[ b6 


a ae aaa See a SS ee Sb 


= ———————— DEC WILL EVENTUALLY. HAVE. T0- BID 


LEGAT, BONN ee MAINTAIN CONTACT WiTH[__'JAND- a ea 


DR. POHL. (8), o 
CLASSIF ; 3 ON OADR. 


; — 
= 
: NNNN . . 


ESKMASLHKES 


i‘Haekers 
ipenetrate 


ott 


{NASA data 


network 


"id 
‘By Girard C. Steichen 
“Associated Press 


¥ FRANKFURT — ‘Computer 
hackers broke into NASA's world- 
twide data network this summer 
yvand gathered secret information 
,on space shuttle projects and 
frocket failures, according to 


tbroadcast and print reports yes- | 


nterday. 

% News reports said young West 
‘Germans gained access to 20 com- 
“puters of the National Aeronautics 
rand Space Administration and 
scould have paralyzed the entire 
"network. The ARD television net- 
twork said a flaw in the security 
ssystem gave the hackers access 
from May to September. 


The NASA system connects 
“more than 1,600 computers world- 
{wide that share data on space re- 
‘search, nuclear physics and mo- 
Yecular bidlogy, ARD reported last 
might. The network {includes the 
‘US atomic research facilitles in 
Los Alamos, N.M. 


; In Washington, NASA said ina 
‘gtatement that the tapped net- 
swork provides unclassified infor- 
wmation to university and industry 
fyesearchers. ‘‘We know of no 
‘classified information which can 
‘be accessed through the net- 
‘work,” the statement said. 

} The statement said NASA uses 


= 


a number of computer networks 
with varying degrees of security to: 
provide “appropriate Individuals” 
with access to data. 

The Hamburg-based magazine 
Stern reported information simi- 
lar to the ARD report in an ad- 
vance that was telexed to news 
media yesterday. « 

The Hamburg-based “Chaos 
Computer Club" said the youths 
turned to the club for help when. 
they realized the enormity of their 


AP photo 
Steffen Wernerg of Hamburg, a member of the “Chaos Computer 
Club," works at a terminal in his home yesterday. 


discovery. The organization said. 


the hackers penetrafed the net- 
work to show the “unbelievable 
weaknesses” of the security sys- 
tem and had no interest in the se- 
cret data. 

In one of the most serious secu- 
rity breaches, the hackers ob- 
tained NASA information on 
space shuttle projects, computer: 
security studies and rocket boost- 
ers, the ARD reported. 

No charges have been filed. 
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| oats > SAVE.20% all leisurewear 


SAVE 20% all robes: 
SAVE 20% all'bras | aan i - 


j 
SAVE 20% all‘control bottoms “ i! 
SAVE 20% all daywear , : . ; 
SAVE 20% all pants. (excluding Jockey) { 
ACCESSORIES: . i 
SAVE 50% all 14it-gold chains z3 if 
SAVE 50% all sterling silver chains | i 
SAVE 35% all 14kt Jacmel gold earrings: a 4 
SAVE 25% all belts ; | i 
SAVE 20% all mufflers c 4 . | 
‘SAVE 20%.all hairbows’ | ‘4 
SAVE 20% all Antron and silk: lined ‘gloves . - 
SAVE 20% all knit hats, knit scarves, arid knit gloves j 
SAVE 20%. all. fashion jewelry : 
‘SAVE 20% all semi:précious stone jewelry , , ane 
SAVE 20% all-Filene’s own simulated: pearls 
SAVE 20% all sterling. silver jewelry. 


SAVE 20% all hosiery 
SAVE 20% all handbags (excluding Gucci, Fendi; Dooney & 
Bourke, Coach, and Liz: Claiborne) 


SAVE 20% all: novelty ‘watches. (excluding Swatch) 


FINE JEWELRY: _ 
SAVE 35% all fine jewelry excluding Gueci and: Movado) 
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AUTOMATIC DECLASSIFICATION cUIDE 7 - 
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FORNS. TEXT HAS 1 DOCUMENT 
INBOX.1 (#846) 

TEXT: 

VZCZCHQO0014 

P 2307222 SEP 87 

Fu LEGAT EONN (196A-229) (P) 
TO ACTING DIRECTOR PRIORITY 
BOSTON (264A-1) PRIORITY 
PHILADELPHIA PRIORITY 

C0 NOT L 


Br 


ATTENTION CID, ys To (COLLAR CRINE SECTION 


UNSUBS, AKA COMPUTER eue0e CLUB, HAUBURG, REED ey REPUE Ete OF 


= ~-OF COMPUTER-HACKERS, CALLING THEMSELVES COMPUTER CHAOS CLUB (CCC) 


~~ GERNANY (FRG); ion ; s 22 % ba oc. wre & -b7D — 


THIS TELETYPE Is CLASSIFIED CONEEDENTIAL IN ITS BUTTRETY. 


FOR INFORMATION OF PHILADEEPHIA, THIS MATTER WAS IBLTLIATED 
UPON A REPORT RECEIVED BY LEGAT, BonN[ 
Do iv Ecatine THAT A cRoUP 


| 

| 

| | 

cs REBONTEL. DATED ‘SEPTEMBER: 5, eT). «ae SR Te BY Oe 
| 

| 

| 

| 


AND LOCATED IN HAMBURG, FRG, HAD DURING JULY, 1987, SUCCESSFULLY 


INDEX 
FILEB 


GP") 4 1987 


O 


PAGE TWO DE BON 0238 C_O N-¥-=-DE-H TT AL 


ENTERED COMPUTERS OF VARIOUS UNITED STATES CONCERNS (NASA, MIT, 
CALTECH, JET PROPULSION LAB) AXD SEVERAL RESEARCH CENTERS IN 
OTHER WESTERN NATIONS WHICH ARE MEMBERS OF THE SPACE PHYSICS 


ANALYSIS NETWORK (SPAN). -THE COMPUTERS WERE exclusively, | 


INTRUSIONS WERE ALLEGEDLY POSSIBLE DUE TO 


Do tte coe rn aot 
MID-AUGUST, THROUGH A MIDDLEMAN, [_————_—'| tua LF [pip nor 


CORRECT THIS ERROR WITHIN A TWO-WEEK PERIOD, THE INTRUSIONS WOULD 


b7D 


BE PUBLICIZED. THE HACKERS ALSO PROMISED[ ]THAT-THEY WOULD 


DISCONTINUE THEIR INTRUSIONS. [Td 


a 


IN A MEETING ON SEPTEMBER 17, 1987, BETWEEN[ =i 
AND ASSISTANT LEGAT HANDLING THIS MATTER,[——————CCC TJ 


b7D 


[Ry ae ee eg eee) 


PAGE THREE DE, BON 0238 C 0 N-F-SE-#T TAL 
HACKERS HAD NOT KEPT THEIR PROMISE AND THAT ONE OF THE ALLEGEDLY 
SEVEN HACKERS INVOLVED HAD MADE A FURTHER INTRUSION INTO NASA, 


OBTALNING INFORMATION WHICH WAS DISPLAYED ON THE TV INTERVIEW. 


[rua [7 ]eerresentatives WILL REPORT INFORMATION b7D 


[ BUT THAT NO MENTION WOULD BE MADE OFL__| 


INVOLVEMENT AT THAT TIME IN ORDER TO TRY TO PROTECT THE SOURCE 


WHO INITIALLY coNtactep[ sid ; 


THE SDS CONTACTS CONSISTED OF AN OFFER TO 


PROVIDE assistance ToL OF THESE 


— = = Soe ee “ oe Syts ae —-—b7C - 


[_——_dAND THAT THEIR BONA FIDES BE ESTABLISHED AS WELL AS 


THE NATURE OF POSSIBLE ASSISTANCE WHICH THEY COULD PROVIDE. 


PAGE FOUR DE BON 0238 C ON -F-pEHTTAL 
[i |un CONNECTION WITH THE ABOVE-DESCRIBED INTRUSIONS BUT 


[ INDICATED THAT HE AND omuzr| | REPRESENTATIVES WILL 


PROVIDE INFORMATION REGARDING 


~~ |abvtsep-HE-DID. NOT KNOW OF THE NATURE OF AMY RECORDS 


=. POSSIBLY AVAILABLE AT NASA AND OTHER peeEe TRY. pactLiiate WHICH 


—— ie ASKED IF THE FBI WOULD BE, ABLE TO ASSIST IN 


OBTAINING SUCH RECORDS. [____] INDICATED HE-WOULD-KBEP BONN >. => ©) 0 >t 


ALREAST OF DEVELOPMENTS. 


PHILADELPHIA DIVISION AT PHILADELPHIA, PENNSYLVANIA: 


a AS WELL. AS THEIR INTENTIONS LN THIS MATTER. 


REQUEST OF THE BUREAU: 


mek ) O 


PAGE FIVE DE BON 0238 € 0 -N-F-5 4-4 T TAL 

FBIHQ IS REQUESTED TO DETERMINE THROUGH LIAISON WITH NASA 
REPRESENTATLVES IN WASHINGTON, D.C., THE EXTENT OF ANY RECORDS 
WHICH NASA MAY HAVE TO SUBSTANTIATE THAT THESE INTRUSIONS 


OCCURRED AND TO ESTABLISH THE NATURE OF THE HACKERS' ACTIVITIES 


IN ITS SYSTEMS AND ADVISE BONN ACCORDINGLY.. 

BT 
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TRANSMIT VIA: PRECEDENCE: CLASSIFICATION: 
O) Teletype 0 Immediate 1 TOP SECRET 
O Facsimile O Priority O SECRET 
f& _Airtel O Routine 0 CONFIDENTIAL 
[ UNCLASEFTO 
0 cee 0/9/87 


2 : ACTING DIRECTOR, FBI 
(ATTENTION: [| _____——~—~=«diSsSFNANCIAL CRIMES UNIT) 
3 : 
HICAGO (264B-2) (P) (SQ 7/15) 
4 
5 
6 
7 
8 
9 
ae a —Re-Chicago atrtels—to-the Bureau, dated 9/24/87, 
10 and 9/29/87. 
~ oe oe : 7 Bnelosed for Boston are one copy each-of= 
referenced Chicago airtel's. ~~ : me 
12 
oe as a! Also enclosed for the Bureau; Legat, Bonn; WFO; 
~--  -  -13- |= = and Bostoa- aFé_one_packet_each of -a~set of documents 
received from officials at FERMI NATIONAL ACCELERATOR - --- - 
14 LABORATORY (FNAL) detailing how subjects access computer 
systems/networks, including those at FNAL and the NATIONAL 
15 AERONAUTICS AND SPACE ADMINISTRATION (NASA). 
16 For information of the Boston Division, the 
So ee ef --Chicago. Division. _is currently investigating "hacking" 
17 incidents involving-VAX=computer=systéms located at: FNAL,— ——— _ 
Batavia, Il., during which the intruders accessed and 
18 modified some FNAL computer systems. It is believed that 


19 4 - Bureau (Encl.1) 
(2 - Legat, Bonn) (Encl. 1) (196A-201) 
20 2.- WFO (Encl. 1) (info.) 
<2- Boston (Encl. 3)@ 
214 2 - Baltimore (Info.) 
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OCT 19 1987 
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the perpetrators are members of the CHAOS COMPUTER CLUB (CCC) of 
Hannover and Hambtirg, West Germany. Referenced Chicago airtels 
set out details of information received in this matter from FNAL 
officials. 


As also indicated in referenced Chicago airtels, the 
Chicago Division has received information that the CCC may also 
be responsible for recent hacking incidents involving an 
international computer network of the NASA. The Chicago Division 
has been in-contact--with officials from the NASA OFFICE OF THE 
| INSPECTOR GENERAL (OIG) and the SPACE PHYSICS ANALYSIS-NETWORK - 
(SPAN). Details of these contacts are also set forth in - 
| referenced airtels. The Chicago Division has suggested that WFO 
| open an investigation into the NASA hacking incidents and contact 
| their UNITED STATES ATTORNEYS (USA's) OFFICE for a prosecutive 


opinion. 
Assistant: United States Attorney («ausayL__ 
NORTHERN DISTRICT OF ILLINOIS (NDI), Chicago, Il., Has been 
contacted regarding this matter, and she has advised that it 
appears that there are. potential violations of Title 18, United 
States Code, Section 1030” (Fraud-and—Related—Activity in ; 
__ connection with Computers) and_Section 2701 (Unlawful Access to 
Stored Conmunrttattons)=-===AUSAs .recommended further 
_—_— ~Ttavestigation_be conducted in this matter to determiie thes ss225sce 
identity of the intruders; -and— Af—suffictent—evidence could be 
a2 collected and the identity of the intruders determined, she~would 
=consider Federal rosecution in this. matter. She recommended 
h - 


She also recommended that contact be maintaine 
between the Chicago Division and WFO regarding prosecution of 
subjects. 


on 10/5/87,[ NAT-LONAL- ay Be 
SESS g PACEMS CTENCE= <DATA=CENTERXGNSSDC),,_.CODDARD SPACE FLIGHT CENTER, b7C 
Greenbelt, Maryland, telephonically~contacted=thésChica a ots 


Division and advised that he had heard that the 


On 10/7/87, Bureau Supervisor [sd Fimancial 
Crimes Unit, contacted the Chicago Division and advised that the 


- ps - - 
Bee Ja 
: se 
a . 


CG 264B-2 


Boston Division has an active investigation of the CCC, and the 


4 have been | ct with officials from the 
and L_ “He. further +|--|- 
-advised. that. the extradition tréaty between thé United States and-|; 


¢West. Germany has -not been updated to include computer fraud, and, 
V.therefore : 


_| in. the United States.; He 
recommended that AUSAs considering prosecution of subjects in 
Mest Germany contact Ld with the OFFICE 


OF INTERNATIONAL AFFAIRS, DEPARTMENT OF: JUSTICE.,—and_speak with _ 
them regarding the current extradition treaty with West Germany. 


Based on information furnished by SupervisorL___], the 
Chicago Division plans on recontacting AUSA[_—_—s'i;::« Chicago, for 
an updated prosecutive opinion. The Chicago Division is still 
desirous of obtaining any information available regarding the CCC 
and its members in view of the fact that they. are suspected of 
being responsible for captioned matter and other -hacking. 
incidents involving Government computers throughout the United 
States. 


- 


_,of this communica 


The Bureau is requested to forward appropriate copies™ 
tion and enclosures to Legat, Bonn for their 


information. 


Legat, Bonn is requested to = SS 


furnish pertinent information to the Bureau, Chicago, and other 
interested offices. 


Boston is requested to furnish information regarding 


their investigation to thé Chicago Division;~as--well_as.any 


_ information that they have regarding the CCC and its members. 
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FRAUD BY WIRE-INTERNATIONAL FRAUD 


Retention For appropriate 
O Forinformation optional ) action © Surep, by 
© The enclosed is for your information. If used in a future report, © conceal all sources, 
( paraphrase contents. 
© Enclosed are corrected pages from report of SA x 
7 dated 
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DATE 08-02-2021 BY: Best Available Capy - . 0 bes , 
& b7c 
~ , z 
NZCZCPRAPO343 geese 
RR HO RO PELE SUNT 
¢ le ; 
DE PAR #9343 2881937 Y Ubi hi ee | 
ZNY SSSSS FELEAS). saifdaw Hi 
N s OF INVESTIGATION he 
R 1811307 OCT ‘27 
2 
PARIS (1960-198) (P) " 
= 
TO ACTING DIRECTOR, FBI ROUTINE : 
_- TO _LEGAT, BONN. —ROUTINE: -(VIA-PRIHO) - * : Se a 
np oe 
Spee 
ATTN: WCC SECTTON 
computaR wHere pRom[ | PRAMD RV WIRE = INTPREATTONAL b7D 
FRAUD, 
THES COMAENTCATION TS CLASSTRIEN USRSARTT TY ITS ENTTRRTY, ; 
QLLOWING=ENPORMATION=WAS=REGELVEN=F ====b7D 


INDICES SEA HED 
FOIMS 
oe uy oe 


SA Ss e 
MINITIALS: "pyres 


. Coes O Best Available Copy” ° ? 9) 


PAGE TWO DE PAR 9343 S_E-@-RoE T 


INSTRUCTIONS ON ACCESSING THE NASA LINK WRPE PURLISHED BY A 
WEST GERMAN MESSAGE CENTER (NOT IDENTIFIED) IN MARCH 987 AS 
FOLLOWS: 
- ACGRSS NUMPER: b7E 
~~ ~~ ~~ USERS -NAMES.2__- eae, 7 _ : 
TT WAS ALSO EQUALLY SPECTFIRED THAT TO ACCESS OTHED NAMED ee =s 
COMPUTES: SILVER, GOLD, ORANGE, RED, BLUE - THE NAME FOR THF 
USER TO USE was[ | 


HPANQUARTERS IS 8=QUESTFND 7) PROVIDE ASOVE TNFARMATION TO 00 


a IN THIS. MATTER AND. TO FOPMNARD TO GEGAT, PARTS ANY AVALILAPLE 


ES ENEORMARION, 


} ANY INFORMATION AVATLAPLE 


LFGAT, RONN IS RTOURSTED TO ORTATS 


“< 


oe . O Best Available Copy « - = O 


PAGE THRFE DE DAP 1342 S-E-G-R-F TT | 
ne AND FORWARD TO GFGAT, RAPTS AND HO. 


C BY 416; DECL: OADP. 
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NBOX.7 (#687) 


TEXT: AXOG6G9 3151856z 
PP HQ LEGAT BONN BS PH CG SEF PG 
DE AX 

P 1118582 NOV 87 

FM ALEXANDRIA (196A+999) (P) 

TO DIRECTOR PRIORITY 

LEGAT, BONN PRIORITY 

BOSTON (264A-1) PRIORITY 
PHILADELPHIA PRIORITY 

CHICAGO (264B-2) PRIORITY 


SAN FRANCISCO (196A-2587)[ _—_| PRIORITY =. 
PITTSBURGH (196A-1638) PRIORITY 


| BT 7 —— 
aa aR a i neg 
: SECTION 2 OF 2 - : 
_ -APTENTION: CID; WHETE- COLLAR CRIME -SECRION = = = === = 00 


UNSUBS; UNAUTHORIZED USE OF GOVERNMENT ‘COMPUTER SYSTEM IN ° 
LAWRENCE BERKELEY LABORATORY, BERKELEY, ‘CALIFORNIA; COMPUTER FRAUD 


, AND ABUSE 


-=~—UNSUBS ,- AKA~COMPUTER- CHAOS" CLUB, HAMBURG,~FEDBRAL REPUBLIC= OF ~= =--="=-- ==" == 
: b7D 
GERMANY (FRG)? [] 


PAGE EIGHT AX I96A-999 UNCLAS 


b6 
unsups, axaf 


RANGERS; CHAOS COMPUTER CLUB (CCC); HANNOVER, WEST GERMANY; 


COMPUTER FRAUD AND ABUSE 


[_____satmosr CERTAINLY CHANGES PASSWORDS. THIS IS AN ee 
EXTREMELY DANGEROUS PROGRAM TO THE SYSTEM SINCE IT CAN BE USED TO b7E 


[__ usp SOPHISTICATED PASSWORD:-CRACKING TECHNIQUES TO 


-- DECRYPT PASSWORDS COPIED FROM OTHER COMPUTERS AND: THE ABOVE 


ALLOW A HACKER TO OBTAIN ACCESS WITHOUT PERMISSION. me, | 
| 


PROGRAM WOULD BE A PART OF THAT PROCESS;~ ~~ ~~. 


— bTE 
a | 
(ORES SS ae 
mel 
n¢ - 
| | a 
; OTHER account naMES[ «| STOLE INCLUDE: [___] bé 


eee eae b7c 
te cre aren ee 
NEW LOGIN NAMES OF[ NN ES Nes, Eels 


ANY OTHER PROGRAMS.ON THE TELETYPE ARE NOT ABLE TO BE 


DECIPHERED WITHOUT AN ORIGINAL COPY PROVIDED TO ALEXANDRIA. THE 


ABOVE. PROGRAM DEFINITIONS ARE ATTRIBUTED TO|———=«dCdS ACT 


=o 7 oH . cere 4 Si cot + = « ° - # rar ary 
a oS Q Q : 
4 


AGE NINE AX 196A-999 UNCLAS 
[ Jano THE ALEXANDRIA CASE AGENT. 
IN AN INTERVIEW WITH[ _—_—sd|-:«wHE: EXPRESSED DOUBTS THAT b6 


b7c 
HE RECENT SPAN INTRUSIONS WERE ACCOMPLISHED By sd 


HE ALSO EXPRESSED A CONCLUSION THAT THE CERN HACKING WAS CLOSELY 
RELATED TO[_—™—~—~—C—CCCCSNAALSCO ADVISED HE COULD 7 
INTERPRET ANY COMPUTER PROGRAMS PROVIDED TO HIM AND THAT HE WOULD 
ACT AS AN EXPERT WITNESS REGARDING SYSTEMS SOFTWARE. 
| IT IS AGAIN REQUESTED THAT THE ALEXANDRIA CASE AGENT BE 


ALLOWED TO REVIEW THE COMPUTER EVIDENCE SEIZED AT HANNOVER, AS HE. 


HAS PERSONAL EXPERIENCE IN THE COMPUTERS THAT WERE SEIZED AND IN 


THE METHODS OF RECOVERY OF ERASED DATA. 


=H ar ee —« —o See SE — os a © — ogee ee 


7347 ; — 7 ee 
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- FD-302 (REV. 3-10-82) 


ee, * err 
we ee eae hme ele 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 11/19/87 
b6 
b7c 
elephone number e 
above- location.. was advised of the identity of the interviewing 
Agent and the nature of the interview. He thereafter provided the 
following information: 
advised that as 
computer systems. customers include 
LABORATORY (FNAL) and NATIONAL SPACE SCIENCE DATA CENTER (NSSDC). 
became aware of the hacking incidents at FNAL and NASA b6 
throug of FNAL and [_____]J of NSSDC. ante 
ae ior ing the incidents was to act as liaison between 
was to maintain customer satisfaction. On a number of éceasions;L__] 
arranged fortechnical_ex experts to meet with FNAL and NASA concerning the 
_ hacking problem they were > experiencing: ai 
Co] advised that he was not in possession of any data” ~ aie “pe — 
~ concerning the hacking incidents or the CHAOS COMPUTER CLUB (CCC), nor was b7c 
“= - hé familiar -with- thé technical -aspects--of the. problen. | |was b7D 
aware that images of NASA's computer system had been “provided -to.the. 
technical division of b and a task force was_in existance 7 7 
at to address the problen. advised 
that nd 
would be able to furnish information concerning 7 | 
is located at DEC corporate office, Maynard, Massachusetts, telephone 
==" == number: 
Regarding information concerning CCC acti er “b6 = 
advised that he had h b7C 
b7D 


that the 


action occurred subsequent to the September 15, 1987 broadcast on 
West German television on which CCC members appeared. further 
advised that 

transcripts concerning the aforementioned television broadcast. 


- 


11/19/87 - Landover, Maryland BA 264B-2 


Investigation on St) 


pam _ 11/19/87 


by Date dictated 


’ 


» This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 
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No further relevant information was furnished by 
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TRANSMIT VIA: PRECEDENCE: CLASSIFICATION: : 
0 Teletype 0 Immediate © TOP SECRET 
© Facsimile Priority () SECRET 
(3 _AIRTEL © Routine © CONFIDENTIAL 
O UNCLASEFTO 
CD UNCLAS 
Date 11/19/87 
j TO: SAC, BOSTON 
FROM: SAC, BALTIMORE (264B-2) (SQ 12) (P) 
: SUBJECT: SUBS Y/ ak. 
5 i b6 
b7c . 
4 
RANGERS; 
6 ,/CHAOS COMPUTER CLUB, 
HANNOVER, WEST GERMANY; 
6 COMPUTER FRAUD AND ABUSE 
Ss 00: CHICAGO 
8 UNSUBS; aka 
CHAOS COMPUTER CLUB; 
5 COMPUTER FRAUD AND ABUSE 
00: WFO 
fps ele Re=Chicago-airtel_to.Acting Director, dated 9/29/87, and WFO 
ne veer -airtel.to_Baltimore, dated -AL/10/87. _ es Soe | ee 
“ Enclosed for Boston is one copy of referenced Chica fe) airtel dated | 5) 
ee f= 9/29/87.5, -and_ one Copy. of an FD-302 Pebicetine the snrene™s bipame airtel, be eH 
= Se nl ete Bigs ee GEAR, cok nae __ bic. 
1 Enclosed fox Chicas a are the “original and one  eopy-of an FD=302--<-= 72> 
in reflecting the interview of [___—i'd|-_~ Also enclosed, in a 1-A envelope, 
are the original interview notes re DAVIS interview. 
te: Enclosed for WFO is. one copy of an FD-302 reflecting the interview 
ee ae 
17 ~ z = SE SS Ss ee 


- Boston (Enc. 2) 
* . 2 - Chicago (2648-2) (Enc. 3) 
. 2 - WFO (264B-2) (Enc. 1) 
2 - Baltimore 


49 JMB: pam 
20 (8) F 
21 es 
af’ 
Approved: f Transmitted Pam 


(Number) i wey. ae 


FS! 


ww, OL 


BA, 264B-2 
JMB: pam 


‘For the information of Boston enclosed Chicago airtel set forth 
lead for Baltimoré Division to interview. i with the DIGITAL b6 
~----~.. .. EQUIPMENT CORPORATION (DEC) for inforiiation regarding hacking incidents at bic 
FERMI NATIONAL ACCELERATOR-- -LABORATORY._(FNAL) and NASA, and any information 
. available from DEC in West Germany concerning CHAOS COMPUTER.-CLUB.(CCC).. __ ead. 
Enclosed FD-302 details limited information provided byL__] and indicates that 
| additional information may be obtained from DEC Corporate :, Office located 
in Maynard, Massachusetts. 


For the information of Chicago and WFO, attmepts to contact[_| 


: [negative to date. [__—sidjjis currently attending a conference 
| and will return on 11/23/87; 


LEADS 


BOSTON DIVISION 


~ = ee eae el - SSS, HG sas 
W t ste 
_b7c 
ne pre | telephone number -—bIC 


SS Sse information: weoncerning hacking incidents. at. FNAL ‘and NASA. Wil 


CCC. 0 SEES ears asec TTT 


BALTIMORE DIVISION 


- AT HYATTSVILLE-RESIDENT AGENCY, MARYLAND. 


a “<Wiltsinterview! __—.as_out lined in Chicago airtel 7 _ P43 
dated 9/29/87. —: =e ee, | 
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TRANSMIT VIA: PRECEDENCE: CLASSIFICATION: : 
O Teletype . UO Immediate O TOP SECRET 
C1 Facsimile O. Priority O SECRET 
airtel Routine. {] CONFIDENTIAL 

O UNCLASEF-TO 

O) UNCLAS | 5 727/87 

Date Ss 

TO:- . SAC, CHICAGO(264B-2) (SQUAD 7C/15) ae 
FROM: SAC, BOSTON(264As%) (P) 
SUBJECT: ee 


RANGERS; 
r CHAOS COMPUTER CLUB;. 
HANNOVER, WEST GERMANY 
COMPUTER FRAUD AND: ABUSE 
00: CG. 


b7Cc 


Re Chicago weeehis to the Bureau, dated 9/24/87;%. 


jand 9/29/87 7 


Enclosed for chi cago Division: are: copies. of 


“fa~series.of_teletypes transmitted between Boston, Division- Ne MI. 
-Jand_ FBIHQ. ia ao. ~ S< 


The. enclosed teletypes describe - Boston. Division' s = rr 
- participation in oie COMPUTER CHAOS CLUB investigation. : 7 


located. in Boston Division. 


ed 


2-Chicago (264B-2)(Enc 1) 


i Ty-Boston ¢ 264A-1 ) 


"JLC/jrs Ele. eee yo a, 
(3)-- ORS 7 a 
: 1s 

Approved Transmitted’ 


ed at’ this point only. because. 


is b7D 
ad 
a 
REF FER . 
(Time) © er eine —— 
. Seek Ife D . Ns ce 
rr 7 
Tey a = 
fa 


O O° 


U.S. Department of Justice 


Federal Bureau of Investigation 


In Reply, Please Refer to 
File No. 


John F. Kennedy Federal Building 
Government Center 
Boston, Massachusetts 02203 


March 1, 1988 


| b6 
| = o b7Cc 
| raud Section 

| 


ee. Criminal Division 

U.S. Department of Justice 
| P.O. Box 28188 
Central Street 

Washington, D.C. 20038 


This letter is in response to a Fébrus T25,°29887— 
= telephone sation betwe j gent at 
Z iis“ office-and -Fraud_Section, U.S. 


1is"o 
“appartment -of Justice, relating to the activities of thé Compiter-——————___ 
Chaos Club in West Germany. Boe ee ee sk 


b6 
b7C 
el tee b7D 
oo? 
bé -—= 
b7C 
b7D 
; ld appreciate the benefit of you ance 
in our investigation of the 
intrusions. In that regard | é contacting you 
by telephone to discuss the matter. We would appreciate your Ss -\¢ 
help in getting us started in this investigation, otto A | 
29 in 
Sincerely yours, Sas. Ny, 
Sei! uD — 


JAMES F, AHEARN Lash 
Special Agent in Charge Filcd 
1 - Addressee 


- Boston (264-1) 


Q By: b6 
c/a pears be 
(2) cting Supervisory Special Agent _ 


Enclosure 
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FD-36 (Rev. 8-29-85) 


QO FBI GQ 
TRANSMIT VIA: PRECEDENCE:. CLASSIFICATION: A — 


“Teletype. O Immediate | © TOP-SECRET @-> 
O) Facsimile O Priority Oo SECRET 
GY woes Sete B-Foutne C) CONFIDENTIAL 
O UWNCLASEFTO 
UNCLAS 
Date on) <2 a 


2 FM BOSTON (264-1) (P) (C-5) 
3 TO BUREAU 


, | BE 

; | UNCLAS ae 
« | ATTENTION: INTERPOL - FOREIGN POLICE COOPERATION UNIT; Pie 
: i FINANCIAL CRIMES UNIT 


CHAOS ,COMPUTER CLUB 


Te ee & 


Peel als RE 2/18/88 ‘BUREAU AIRTEL TO ALEXANDRIA, ET AL. 


REFERENCED AIRTEL CONTAINED ‘A COPY OF A RADIO~MESSAGE- FROM___ 


a os _ INTERPOL, “WIESBADEN DATED~272/88;- = CONCERNING_ILLEGAL | PENETRATION 
1 al eS ee i 


OF COMPUTER ‘DATA BASES BY THE CHAOS- COMPUTER CLUB: IN- GERMANY. ; | 


21 Te fenao OD ; Fi) ess ee : 


Dé 
Transmitted we COCBS ONS Per DW. 7 


Approved: 
ane (Number) (Time) 


S) ©) 


Airtel 


Unclas 2/18/88 


Director, FBI 
SACs, Alexandria 
_” Bostorm 


Chicago 
Washington Field Office 


cinos GmrurEn CLUB 


emia SSS 


FBI — BOSTON 


VZCZCBS0012 : 

RR HQ BON CG ‘iiFo. 

“DE BS #0012 1411907 
2NR UUUUU . . ad 
R ‘2018232 MAY 88 | | : 
FM FBI BOSTON (264-1) 4 . 
TO DIRECTOR FBI/ROUTINE/ 


_ LEGAT BONN (196A=229)/ROUTINE/ + 


ee FBI CHICAGO (264B- ~2:) /ROUTINE/ 8S : 


a > ---=~-~- “WASHINGTON METROPOLITAN FIELD OFFTCE/ROUTINE/ 


oS xP. “i UNCLAS- a, , , 


CITE: //3090// © ,  . a ee 


es a 


SUBJECT: cUNSUBS : a ag COMPUTER ‘CLUB, HAMBURG ,, FEDERAL, 


"=== SREPRUBLICG0E- GERMANY GDRG.) coMPUTER FRAUD AND ABUSE, 00:* BOSTON. 


REFERENCE - 2/18/88 BUREAU. AIRTEL 70 ALEXANDRIA” AND" “BLT [88 oo 


BOSTON TELETYPE TO DIRECTOR. “8 . ae + OF we 


: “4 


‘ weed = can Doane = a "7 LS ee ee e TOF PAT oo f =~ 
. 
_ ; * 
i a 7 e ~ ' . . we oo4 
4 


PAGE TWO: DE BS 0012 UNCLAS. 


BELIEVED TO: HAVE BEEN PERPETRATED BY ‘MEMBERS OF THE -CHAOS 


IN MARCH, 1988; BOSTON. DIVISION was ADVIgep.By| 
PERSONNEL THAT THE[ __—=—=—=«d CHAOS COMPUTER cLUB,[__] _ bb 


2 er a . « 


COMPUTER CLUB. IN AUGUST, 1987 UPON RECEIPT OF A TELETYPE “RROM” 


LEGAT, BONN. IT HAS FURTHER BEEN DETERMINED THAT BOTH WMFO AND 


nove CHICAGO DIVISIONS | TAN E: PENDING “CASES WHEREIN’ THE CHAOS. COMPUTER ; 


CLUB Is BELIEVED. £0 “HAVE. “ACCESSED” “COMPUTERS. =IN THELR: TERRITORIES: _ 


IT 1S UNCLEAR, HOWEVER, WHETHER, PROSECUTION OF. MEMBERS OF THE 


CHAOS COMPUTER CLUB WILL occuR IN | THE UNITED STATES, OR, THE 


BastON DIVISION BECAME ‘AWRRE™ OF ‘THE ACTIVITIES: OF. THE CHAOS | 
FEDERAL REPUBLIC OF .GERMANY:,. ‘THERE IS ‘NO..COMMUNICATION BETWEEN, 


PAGE THREE DE BS 0012 UNCLAS 


INVESTIGATORS IN THE UNITED STATES ‘AND INVESTIGATORS, IN GERMANY. 


. b7D 
bTE 


LEGAT, BONN IS REQUESTED TO PROVIDE BOSTON DIVISION, CHICAGO 


DIVISION, AND WMFO AN. UPDATE ON THE STATUS OF THE GERMAN 


INVESTIGATION OF THE CHAOS COMPUTER CLUB. LEGAT, BONN IS FURTHER’ 
REQUESTED TO DETERMINE IF THE SCCCCCCCCCCC*dYSCSCSC«é~ ‘=CCZ 


IT SHOULD BE noren THAT, ae 


HAVE OFFERED. THE USE OF THEIR RESOURCES BOTH IN“THE-UNETED STATES _ 
AND EUROPE To ASSIST US ANDD___————CSdIN TTS =? x 
: * 


INVESTIGATION OF THE COMPUTER HACKERS. 


BT 


#0012 é ; : 
NNNN 2°? > 


». a ie en ae 


FD-36 (Rev. 8-29-85) 


ers AR ; 
2 6 a QO-- 


iam. 


TRANSMIT VIA: PRECEDENCE: CLASSIFICATION: 

C) Teletype © Immediate O TOP SECRET 

O Facsimile O Priority O SECRET 

(& _Airtel ©) Routine 1 CONFIDENTIAL 
O UNCLASEFTO 
&) UNCLAS 


Date ___.5/20/88 


TO: DIRECTOR, FBI 


: (ATTENTION: ssa[ ss FILNANCIAL CRIMES b6 
‘ UNIT) BYE 
3 FROM: SAC, CHICAGO (264B-2) (C) (SQ 70/15) 
4 = 2 
5 
Z EI” RANGERS; 
CHAOS COMPUTER CLUB; 
. HANNOVER, WEST GERMANY 
COMPUTER FRAUD AND. ABUSE 
00: CG 
8 
= “sg Re Chicago airtel to the Bureau, dated 10/9/87; 
Chicago teletype to the-Bureau,dated 2/26/88; Legat, Bonn 
Se ee Jeg teletype to the Bureau, dated 3/21/88; Boston télcall to 
= l= CHL CA Z05=37-28-/:8 8. juand Chicago telcalls to ie Sarees ; 
oF os de 440 and. 5/6/88. _ sae st : 
12 For information of the Bureau and -Legat, Bonn, -- ~- So, She 
Sat vu Tj} -during referenced telcall from Boston to Chicago on March ‘ 
13 : 28, 1988,- sA{_ Boston... advised the Chicago b5 
Division that he had beéna in contact withL______}Fxaud- _____-b6 = 
ae Department, UNITED STATES DEPARTMENT OF JUSTICE (USDOJ), ee 
regarding captioned matter and other computer 
15 hacking/intrusion incidents throughout the United States 
-  -(u.$.) - 
= tere sh 6... = 
17 5 - Bureau SS ee =e 7 
(1 - Foreign Liaison Unit, Office of Liaison ae taternational Affairs)" = 
18 (2 ~ Legat, Bonn) (196A-201) 
d - Boston (264A-1) 
19 1 - Chicago 
BEH:meo 
20 (8) 
21 


Approved: __ ee CCSTTrrarnsmitted 


#U.S, GPO: 1987 — 181-) & 
b7c 


roa 


0 G «> 


CG 264B-2 


On 5/2/88, [en b3 
[| sFERME NATIONAL ACCELERATOR LABORATORY (FNAL b6 


Batavia, Il.., was contacted to determine if any further b7c 
intrusions had ‘been received on the FNAL computer systems. 


but they had not receive 
Seaee pertinent activity on ; that~account._He advised that FNAL 
es eee has not had Ree PureRes intrusions on their-computer 


eens in view of the opinion of AUSAL____],, Chicago b6 
Sg s“considéringscaptioned. matter closed, and no further ~ ‘b7c -- 


active investigation would iid =be-conductedeatathis.time. 7 
SES RS 


gis QO ®) ae 


CG 264B-2 


The Bureau is requested to forward appropriate 
copies of this communication to Legat, Bonn, for their 
~ a information. 


Legat, Bonn should discontinue leads set out by 
the Chicago Division in referenced communications. - of 
ee As Z ‘ St : aoe ee cca 
: : mee = 2 ! - 7 y = Ses 
3% 


n Se ges” ERE 5 sere ip” ey i 


Ee 


VZCZCBS0001 


RR HQ LL BONN : 


DE BS #0001 1651409 

ZNR uyuUU 

R 1313482 JUN 88 

ea _ --EM FBI BOSTON-(264-1) (P) oe ; 
TO DIRECTOR FBI/ROUTINE/ 

LEGAT BONN (196A-229) /ROUTINE/ 

Br 

UNCLAS 


CITE: //3090// 


AOS~COMPUTER CLUB, HAMBURG, FEDERAL 


- “REPUBLIC OF GERMANY (FRG); _] = 


_- _-RE LEGAT, BONN TELETYPE; -5/27/883— Sa, ee ee, ee ee 


AS HAS BEEN CITED IN SEVERAL PREVIOUS COMMUNICATIONS TO 


i es 


HAS EXPERIENCED A CONTINUING PROBLEM WITH UNAUTHORIZED INTRUSIONS 


aoe ENDO 22S -COMPUTER=SYSTENS==MANY<OF“THESEINTRUSTONS “ARE BELIEVED 


By[ ro BE ATTRIBUTABLE TO THE CHAOS COMPUTER CLUB, HAMBURG, 


: SEARCHED + _ 

: SERIALIZED con 
NDEED. 
FLD gO 


40¢l-aTe 


enn Pub Pr ar ae 


it 


4 


x 


oA s Be og . q 
BOSTON CASE AGENT HAS MET WITH REPRESENTATIVES of jon 
SEVERAL OCCASIONS TO DISCUSS THE UNAUTHORIZED INTRUSIONS. [——] 
OFFICIALS HAVE CONTINUALLY EXPRESSED THEIR WILLINGNESS TO 


COOPERATE FULLY WITH THE FBI AND FRG AUTHORITIES IN THE 


INVESTIGATION OF THE COMPUTER HACKERS. FURTHER,| HAS OFFERED 
TO PROVIDE WHATEVER TECHNICAL ASSISTANCE 1S NECESSARY TO ASSIST 


THE INVESTIGATION. 


ON 6/24/88, BOSTON BUAGENT WILL AGAIN MEET wie] 


BOSTON BUAGENT WILL ATTEMPT TO 


ASCERTAIN WHAT INFORMATION [| ]HAS COMPILED RELATING TO-THE ‘CHAOS 
ee eet 


Maa EE REET a ee a fe WS TS Bee ee 


co 


' 
PAGE TWO. DE BS 0001 UNCLAS : 
FRG. 
| 
| 
| 
i 
| 
i 


‘ 


THAT IF A MEETING ILS SCHEDULED, A REPRESENTATIVE FROM BOSTON 


DIVISION BE. LINVETED TO-ATTEND. wee : 7 


NNNN ee 


C467 1461208 


- N 

ZNY EEEEE 

 p 2512012 MAY 88 | 

"FM BONN (196A~229) (P) - 
TO DIRECTOR “PRIORITY 

FBI, BOSTON | PRIORITY 

| 


FBI, CHICAGO PRIORITY : 


FBL, WMFO ¢264A-2) (C-5)- PRYZORITY 


TO 7 7 we Te Pe ae ee er ae ee a ay ee ee 


UNGLAS E F 


ATTN: CID, WHITE COLLAR CRIME SECTION; INTD; C1-2 


. SECTION 2 OF 3. 


UNSUBS; AKA CHAOS COMPUTER CLUB, “HAMBURG, FEDERAL, REPUBLIC OF~ -~ 9 3 --~ - 9 --~ 3 


GERMANY (FRG); [__] oo - : Art 36 se b7D 


FROUWTHE-FRO-TO-ANOTHER-COUNTRY-FOR-ANY-cRIME.| ————— oe 


+ 


PAG 


[___—s—s—~—sSs*ds HAT «THE NEED FOR INTERNATIONAL COOPERATION b7D 


IS ESSENTIAL ZN THE INVESTIGATION OF THIS CRIMINAL ACTIVITY AND 


THAT ANY CHANCE OF PROSECUTION IS NEGLIGIBLE WITHOUT SUCH 


cooreratron. Ld 


{ CR UBTHES A RECENT PRESS REBORT DESCRIBED ae ee AS HAM ENC A 


"SPECIAL OFFICE WITH THE NECESSARY EQUIPMENT AND’ TRAINED PERSONNEL. , i 
I 


0 Ge. 


PAGE THREE DE BON 0467 UNCLAS E F T 0 2 


FOR THE FIGHT AGAINST COMPUTER CRIME. [ ———i—‘“‘C*™*~*~*~S~C~*@CS b7D 


A SERIES OF NEWS ARTICLES ALSO APPEARED RECENTLY, SOME OF 


WHICH RESULTED FROM THE MARCH 15, 1988 DETENTION OF CHAOS 
COMPUTER CLUB MEMBERS[——“‘“‘SC;™C™C*C*CW ORR ae 
ALLEGED INTRUSIONS INTO COMPUTERS OF FRENCH CORPORATIONS. THESE 

“ARTICLES ALSO MENTION: INVESTIGATIONS BY POLICE OF PENETRATIONS OF 

* NASA COMPUTERS IN THE US BY OTHER CCC MEMBERS. 

OTHER ARICLES MENTION A WEST GERNAN COMPUTER HACKER WHO HAS 


_ INTRUDED INTO US MILITARY COMPUTERS AT NUMEROUS LOCATIONS IN THE _ ee 


US. THIS HACKER IS THE SAME AS IN THE CASE CAPTIONED "UNSUBS; 


—= = = ——— —a 


"UNAUTHORIZED USE OF GOVERNMENT COMPUTER SYSTEM IN LAWRENCE ee Ne aes Ws 12S Aas | 

| BERKELEY LABORATORY, BERKELEY, cALtFornta;| | OO:AK" (BONFILE an 

"*496A-221), AND WHO WAS PREVIOUSLY IDENTIFIED as[ Os IP 
[___s|)s AccorDINc To AN ARTIGLE IN THE WEST GERMAN ILLUSTRATED 


MAGAZINE "QUICK", THE PROSECUTOR, HANS-GEORG VON BOCK IN BREMEN, 


ADVISED THAT THE WEST GERMAN INVESTIGATION HAD BEEN CLOSED SINCE 


x 


| O° O 


PAGE FOUR DE BON 0467 UNCLAS E F T 0 


THE BREMEN COURT DESCRIBED THERE WAS INSUFFICIENT EVIDENCE. 
“ANOTHER RECENT ARTICLE IN TIME MAGAZINE ENTITLED, "A BOLD RAID, ON | 


COMPUTER SECURITY" DESCRIBES CLIFFORD. STOLL'S EFFORTS IN TRACKING oe 
oe ‘ e 


DOWN. THE HACKER IN HANNOVER.. 


LEGAT BONN PROPOSED IN BONN TELETYPES DATED NOVEMBER 25, 
1987 AND FEBRUARY 1, 1988 IN THE CASE CONCERNING[ AND THE LBL { i 
INTRUSIONS. THAT THE US FILE A CRIMINAL COMPLAINT AGALNST|__i 
PURSUANT TO RULES UNDER THE US-FRG MUTUAL ASSISTANCE ¢REATY IN 
ORDER TO PROSECUTE[ _} ‘TO DATE, BONN HAS RECEIVED NO RESPONSE 
FROM FBIHQ OR THE OFFICE OF ORIGIN REGARDING THIS PROPOSAL. 


THE SAME PROCEDURE, I.E. FILING -A :-CRIMINAL ‘COMPLAINT AGAINST 


| 
| 
| 


~ CCC INTRUDERS OF NASA CONPUTERS PURSUANT TO US-FRG MUTUAL, ~—- a 


|. 

| ASSISTANCE. TREATY.,-WOULD_SEEN.T0.BE. IN ORDER IN THAT CASE, 
ea or _ a 
| PARTICULARLY. IN-VLEW-OF THE REPORT recexved [| THar NASA HAS bé ~ 


FILED A CRIMINAL COMPLAINT IN THE us. . : _ © - b7D 


REGARDING cc WHOSE TRUE NAME WAS AS 


YET NOT BEEN MADE PUBLIC, AN ARTICLE IN THE APRIL 19, 1988 ISSUE 


OF WEST GERMAN NEWSPAPER "DIE WELT" MOTIVATED THE[ ids 


O O 
PAGE FIVE DE BON 047 UNCLAS E F T 0 _ ; : 
P| THs es 
ATICLE IS TRANSLATED AS FOLLOS: 

"PBL SEEKS. GERMANCOMPUTER HACKER. 


"A24 YEAR OLD DATA PROCESSING TUDENT FROM HANNOVER 


OBVOUSLY INTRUDED AS A COMPUTE HACKER INTO THE SECRET AMERGAN : . 
SDI PROGRAM. THE YOUNG MAN SUPPOSEDLY -GAINED ACCESS FROM HIS 

FIRST FLOOR APARTMENT IN THE CITY OVER TELEPHONE LINES FOR TWO 

YEARS TO 30 TOP SECRET COMPUTER SYSTEMS. OF THE US MILITARY AND. 

DEFENSE INDUSTRY. THE FBI INITIATED INVESTIGATION, ACCORDING TO: 


A. NEW YORK TIMES ARTICLE FROM APRIL 18, 1988. 
QUICK. ACCORDING TO QUICK, THE YOUNG HANNOVERTAN-WAS- ABLE. FOR ne fee 


=p OSSTBLY “ALHOST=TWO-Y EARS=-LO—AGGESS—THOSE_ GIANT COMPUTERS WHEREIN © 


DETAILS ABOUT. ATOMIC WEAPONS, SDI AND SPY SATELLITES OF-THE NORTH -- . ae 


~ AMERICAN. DEFENSE COMMANDS ARE STORED. US SECURITY EXPERTS; ° ; 


HOWEVER, CLAIMED YESTERDAY HE DID NOT GET INTO THE SPECIALLY aes ges 


SECURED :GOVERNMENT COMPUTER AND MOST SECRET DATA. HOWEVER, AT 


| THE SAME TIME. THE NEW YORK REPORTS DO NOT EXLUDE THE POSSIBILITY 


4 a aes 


"THE FBI THEREBY ALSO VERIFIES:A REPORT OF THE, ILLUSTATED ~ ~ -~ , 


THAT THE -LITTLE~AMOUNT -OF SS EGRET MATERIAL gaa OUEy: BE 


PIECED TOGETHER INTO SIGNIFICANT INFORMATION? ONE REPORT EVEN. 


ae + T R za : 7 r es 7 . ; 
a @) 
ong 


- PAGE SIX DE BON 0467 UNCLAS E F T 0 


+ 


STATES THAT THE 24 YEAR OLD TRIED TO INTRUDE INTO THE DATA BANKS 
OF 450 COMPUTERS. - : : 
"BASED ON RESEARCH OF 'DIE WELT', THIS MUCH IS KNOWN: THE 
24 YEAR OLD OBTAINED ACCESS FROM HIS FIRST FLOOR APARTMENT ON 
[over bate x-p LINES OF THE GERMAN PHONE 
SYSTEM TO THE GIANT COMPUTER OF. BREMEN UNIVERSITY. SINCE THE 
COMPUTERS OF ALL LARGE UNIVERSITIES ARE CONNECTED BY TELEPHONE 
LINES WORLD-WIDE, THE HANNOVER HACKER WAS ABLE TO COMMUNICATE FOR 
EXAMPLE WITH BERKELEY UNIVERSITY COMPUTERS VTA BREMEN. THROUGH 


FURTHER EXPERIMENTS THE YOUNG MAN FOUND THE WAY VIA TRANSATLANTIC 


| TELEPHONE CONNECTIONS TO SECRET MILITARY COMPUTERS. ACCORDING TO 
QUICK, THIS ACTIVITY Was pIScovermp sy[_ sf _ .- 


STTY+ —-FOR-AEMOST—TWO- YEARS, HE RECOGNIZED THROUGH 


b6 


b7¢ 


GONFUSING SIGNS ON THE SCREEN THAT SOMEONE WAS TRYING TO ENTER - 
, ENZO. COMPUTERS OF THE US AIR FORCE, THEREUPON EACH COMPUTER 
ACTIVITY WAS RECORDED AND: SUMMARIZED IN A SEVENTY=PAGE SECRET ~ 
END SECTION 2 OF 3 
BT 
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INBOX.13 (#1321): 


- SECTION 3 OF 3 


TEXT 
VZCZCHQO100 


PP HQ BS CH WM 

DE BON #0468 1461210 
_ZNY BEEEE 

P 2512032. MAY 88 


FM BONN (196A-229) (P) 


TO DIRECTOR PRIORITY 
FBL, BOSTON PRIORITY 
FBI, CHICAGO PRIORITY 


FBI, WMFO (264A-2) (CG-5) 


UNCLAS E F T ‘0 


: ATIN: CID, WHITE COLLAR CRIME SEC 


PRIORITY 


> 


TLON; INTD, 


UNSUBS; AKA CHAOS COMPUTER CLUB, HAMBURG, FEDERAL REPUBLIC OF = = —~ - 


“cerwany (FRe)3[] 


STUDY OF THE US DEFENSE DEPARTMENT. | 


"ALREADY IN SUMMER OF 1987 THE DISTRICT ATTORNEY IN ‘BREMEN 


* SPO oor wenn, THEHANMOVER 


POLICE ASSISTED AT THE END OF 


ea 


LAST YEAR. BY CONDUCTING A SEARCH OF 


PAGE TWO DE BON 0468 UNCLAS E F T 0 
A RESIDENCE. COMPUTER AND DISKS WERE SEIZED AT THE TIME. TO 


DATE LT IS STILL UNKNOWN HOW THE STUDENT GOT THE TOP SECRET 
PASSWORD TO ACCESS THE COMPUTER. ‘IT IS ALSO UNKNOWN WHAT 


INFORMATION THE STUDENT WAS ACTUALLY ABLE TO OBTAIN." 


LEGAT'S EXPERIENCE IN THESE CASES HAS BEEN VERY FRUSTRATING 


PARTLY DUE TO A LACK OF RESPONSE FROM THE FRG PROSECUTOR IN THE 


-___]-CAsE; <PARTLY- DUE.TO-A LACK OF RESPONSE FROM THE FBI FIELD 


OFFICES AND HEADQUARTERS TO REQUESTS FOR INFORMATION, EVIDENCE 


a 


, O | Oo 


PAGE THREE DE BON 0468 UNCLAS E F T 0 
AND OTHER PROPOSALS FOR ACTION, ‘AND PARTLY DUE TO A LACK, OF 
CLARITY IN COMMUNICATING NEEDS AND REQUIREMENTS. FROM BOTH FBI AND 


[_] REALIZING THAT INVESTIGATIVE EXPERIENCE IN THE AREA OF b7D 


COMPUTER CRIME IS STILL LIMITED, ESPECIALLY vir 
THAT PARTICULARLY THIS AREA OF ENVESTECAL EON REQUIRES CERTAIN 


SPECIALIZED TRAINING AND KNOWLEDGE, IT IS FELT THAT A PERSON-TO- 


er ae 


PERSON MEETING BETWEEN[_————~—C—CCSd,,:«~FBUHQ OFFICIALS AND. 


nee Sse 
APPROPRIATE FBL FIELD OFFICES REPRESENTATIVES IS DEFINITELY In 


ORDER SO THAT MUTUAL NEEDS, NOT ONLY IN THE INVESTIGATIONS 


| DESCRIBED ABOVE, BUT IN ‘THE AREA OF COMPUTER CRIME IN GENERAL, 


Is 


Soe HE AADERARD "AND -WORKED- our DIRECTLY: IT- IS. SUGGESTED THAT 


~ + aa en | 
| . 


SINCE. COMPUTER. HACKING | WILL - POSSIBLY | Be AN INCREASING enor GED AND 


AS SUCH WILL MOST CERTAINLY AFFECT INTERESTS IN BOTH “COUNTRIES IN” Fe ae Sie eT eS 


PARTICULAR CASES, SUCH A MEETING/DISCUSSION WOULD SEEM TO BE OF 
VALUE TO BOTH FBI [Cd|LEGAT WOULD APPRECIATE FBIHQ COMMENTS b7D 
IN THIS REGARD. 
REGARDING FBI CHICAGO'S INQUIRY, NO ARRESTS. HAVE BEEN MADE 
AND INVESTIGATION IS STILL ONGOING IN EFFORTS TO IDENTIFY THE 
PERPETRATORS. 


, PAGE FOUR DE BON 0468 UNCLAS E F T 0 | 


LEADS: 


[_—s|May BE OBTAINED FOR DISSEMINATION To _|| pe 


t 


WMFO AT WASHINGTON, D.C.. = WILL ADVISE IF INFORMATION AS 


se 


REQUESTED BY[___]CAN BE OBTAINED FROM NASA AND THE EXPECTED DATE ~~ - 
WHEN. LT MAY BE AVAILABLE. — Bis Pina aoe ne 


a ~~ “REQUES T-OF—THE—BUREAUs. 


FBLHQ IS REQUESTED TO CONSIDER ACTIONS TO INITIATE A FORMAL 


AS WELL AS THE INTRUSIONS INTO LBL, AND TO CONSULT WITH WMFO-AND- — -- C sf 8 e 
POSSIBLY OFFICE OF INTERNATIONAL AFFAIRS (OIA), DEPARTMENT OF 


JUSTICE. : - 


==. - ‘FBIHQ IS ALSO REQUESTED TO CONSIDER AN INVITATION oF [___] b7D 


~ JUDICIAL. ASSISTANCE REQUEST IN THE CASE OF THE NASA INTRUSIONS,,. ; 
REPRESENTATIVES TO A MEETING. IN WASHINGTON, D. C. FOR DISCUSSIONS ~- oie ad 
| 
| 


| 


. PAGE FIVE 
AS DESCRIBED ABOVE. 
END SECTION 3 OF 3 
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